I'm running squidGuard 1.1.4. I did a little testing this evening and learned something interesting.
When I added 192.168.44.1 (for example) to a banned destination group, it would block me when I tried http://192.168.44.1, but it would let me through if I tried http://192.168.044.001. If I blocked 192.168.044.001, then http://192.168.044.001 was blocked but http://192.168.44.1 got through. Rick > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Simon Elliott > Sent: Tuesday, May 21, 2002 8:20 AM > To: Rick Matthews > Cc: Squidguard Mailing List > Subject: RE: Banning by IP Address > > > Thanks for the reply, > > I've added it to the 'domains' file, and used standard IP notation. > The site is not available when named. > I am aware of the !in-addr, but I have a lot of test environments that go by > number only so its best not to use it. I have a script that converts the > name to a number anyway when its blocked. > > According to my access.log it goes to the IP stated so its not a problem > there either. > > very strange... any ideas? > > Cheers, > > Si. > > > -----Original Message----- > From: Rick Matthews [mailto:[EMAIL PROTECTED]] > Sent: 21 May 2002 14:01 > To: Simon Elliott > Cc: Squidguard Mailing List > Subject: RE: Banning by IP Address > > > > if I try and ban an IP address in the banned > > list, it doesn't work. > > Let me make sure I understand what you are saying. You've added a site's ip > address to a > defined destination group, but the site is not being blocked? Here are a few > things to > think about: > > Did you add it to domains or urls? > > Did you add it in the standard xxx.xxx.xxx.xxx format? > > Are the text entries in the same destination group being blocked? > > When you access this site, does the entry in your squid access.log reflect > the blocked ip > address? Let me try that one again - You've blocked <20.20.20.20>, but you > enter > http://20.20.20.20 in your browser and you are allowed into the site. Look > at your squid > access.log for that entry. Does it show that you were requesting > http://20.20.20.20? > > Did you know that you can force the use of domain names over ip addresses by > using the > wildcard !in-addr in your acl? (per > <http://www.squidguard.org/config/#Builtin>) > > Hope that helps... > > Rick Matthews > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of Simon Elliott > > Sent: Tuesday, May 21, 2002 4:50 AM > > To: [EMAIL PROTECTED] > > Subject: Banning by IP Address > > > > > > I am having an odd problem with squidguard, although its working perfectly > > well in every other respect, if I try and ban an IP address in the banned > > list, it doesn't work. > > Does anyone have any idea why this should be? > > > > Thanks in advance > > > > Simon. > > > > -- > > Webscript Designs Ltd. > > > > > >
